Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: y5T6+esQg3/mfcmCUqWCXTm2W/5lIlukFTjmC+Z3tSo=
Subject key identifier: 75:EA:50:50:13:8E:B5:0B:F0:D8:F8:7E:95:64:DF:E7:A4:B6:CF:BA
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 0194BC04A671D7931FF492C3D66E68663C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: LPia9UtJZJiA65AhrXDc4gK0gjSbQg9GcSbktzvRnvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:71:d7:93:1f:f4:92:c3:d6:6e:68:66:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=75ea5050138eb50bf0d8f87e9564dfe7a4b6cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:84:b7:18:25:7d:2f:c6:30:bf:c4:f8:85:
0f:10:7d:fe:3b:40:4e:f9:06:ef:f5:a0:d1:54:98:
58:40:ae:90:00:cc:d0:1e:c7:f9:56:56:22:c3:37:
11:56:46:7c:7c:28:90:f1:7d:d1:b0:99:19:0d:a2:
27:e3:57:72:29:4f:5a:70:95:c6:76:ec:50:1d:76:
c2:49:7e:cd:0c:51:2c:a7:5e:39:e8:25:c1:11:75:
38:bd:4b:88:11:bb:b3:c1:ce:a5:b0:93:a9:34:9b:
c0:cf:25:9e:3f:e7:ca:93:90:d1:0a:5e:32:f9:cc:
6a:aa:b6:31:77:c5:7d:2f:37:ec:67:b4:f5:18:16:
8e:db:96:05:05:46:6f:03:d6:99:98:58:77:ca:3b:
81:ba:15:95:d0:22:12:ba:d3:88:10:75:4c:71:5f:
2c:ad:c6:1b:d9:c3:98:89:6f:1b:72:3a:48:19:ba:
7d:15:09:56:37:8a:4c:33:4e:37:cf:53:92:b3:5b:
e8:84:17:df:4e:50:56:53:8a:9a:d6:ec:ea:8b:33:
77:58:fd:89:95:a9:6e:7d:ff:e7:ad:3a:dc:5b:b0:
58:45:7d:f7:0c:c9:7c:fe:e1:37:da:4f:6b:51:6b:
03:78:96:99:9b:9f:0c:bc:e0:dc:64:b7:c4:c3:6d:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:50:50:13:8E:B5:0B:F0:D8:F8:7E:95:64:DF:E7:A4:B6:CF:BA
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c9:1a:27:96:fa:96:00:d6:02:4d:63:08:54:00:2d:fe:e8:
33:12:56:ca:ba:9d:fc:14:3c:bc:da:46:92:b6:f9:e2:6f:55:
b3:6e:e0:1d:fd:23:a7:23:2d:6e:d7:72:32:35:f2:a6:f8:53:
3e:d1:4d:8c:ac:35:45:b6:16:96:04:a6:0b:e2:60:62:cb:f5:
d3:f3:25:2a:4d:ea:4f:65:56:82:09:3b:b8:e2:c3:99:cd:8b:
8e:3b:d9:23:69:70:54:3a:11:e9:41:cb:f7:b0:e6:f2:48:c1:
64:b8:ee:eb:90:77:68:ae:50:6b:c1:41:ff:eb:3b:be:08:65:
98:41:9c:c7:85:e1:0d:08:a1:15:db:92:0e:72:88:2d:df:f0:
05:f8:05:82:0a:17:bc:88:3a:8e:e8:be:1c:41:84:47:be:dc:
56:06:a0:51:5b:bb:86:8e:d9:c0:6b:02:85:26:39:45:34:cf:
26:28:71:58:1a:9b:1f:e0:e1:8f:9c:ab:23:fd:96:72:9f:b4:
30:d1:19:0a:6d:82:59:b2:5f:17:12:87:4b:49:b0:8c:0d:f7:
4a:c8:5a:68:85:a4:97:58:d8:ed:c1:8c:b8:30:91:54:63:c6:
0e:09:29:83:ff:07:e1:8c:e0:af:e1:ee:bf:95:6c:db:82:3f:
a7:bf:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:36 2025 by rpki-client